Modify

Opened 15 years ago

Last modified 5 years ago

#6775 new defect

UserManagerPlugin can auto import bad (empty) usernames

Reported by: lkraav Owned by:
Priority: normal Component: UserManagerPlugin
Severity: normal Keywords:
Cc: Trac Release: 0.11

Description

i ran into a case where i had an empty line inside htpasswd file. this resulted in a user being listed in admin panel with all fields seemingly empty. actually the username consists of a single linefeed, which is visible in page source.

now, pressing Import All for UserManagerPlugin imports this empty user and it is very difficult to get rid of it. because none of Remove or Delete buttons are unable to remove this user, direct access to database is needed to fix it.

sqlite> delete from session where last_visit='1267208488';
sqlite> delete from session_attribute where length(sid) < 3;

UserManagerPlugin should probably check for username sanity before importing.

Attachments (0)

Change History (2)

comment:1 Changed 11 years ago by Ryan J Ollos

Owner: changed from Catalin BALAN to Ryan J Ollos
Status: newassigned

comment:2 Changed 5 years ago by Ryan J Ollos

Owner: Ryan J Ollos deleted
Status: assignednew

Modify Ticket

Change Properties
Set your email in Preferences
Action
as new The ticket will remain with no owner.

Add Comment


E-mail address and name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.